Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/125325F6098F27A112838148A81FD0D1F169696F.cer
File:                     125325F6098F27A112838148A81FD0D1F169696F.cer (raw, json)
Hash identifier:          JOUerHLfptFZMpaDdcUGKOGed3pYn/On9ykh3koikFo=
Subject key identifier:   12:53:25:F6:09:8F:27:A1:12:83:81:48:A8:1F:D0:D1:F1:69:69:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EFF84EC85FC9418E22F5141066184160D064ED5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/125325F6098F27A112838148A81FD0D1F169696F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Jul 2022 11:11:10 +0000
Certificate not after:    Mon 24 Jul 2023 11:16:10 +0000
Subordinate resources:    AS: 61722
                          IP: 131.72.36.0/22
                          IP: 2804:1b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ff:84:ec:85:fc:94:18:e2:2f:51:41:06:61:84:16:0d:06:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 11:11:10 2022 GMT
            Not After : Jul 24 11:16:10 2023 GMT
        Subject: CN=125325F6098F27A112838148A81FD0D1F169696F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:5b:c8:e7:dd:1b:88:33:60:9b:48:c2:2c:
                    dc:53:5e:f0:42:e1:85:57:cf:c7:17:5a:71:25:78:
                    30:c6:fc:9f:08:8d:e1:47:d7:55:6e:85:5e:e5:ff:
                    76:6b:23:e1:2c:46:f7:88:d8:08:72:da:14:5e:f6:
                    87:5e:f3:92:26:d9:b2:50:1f:23:33:46:37:e9:1f:
                    3a:e3:0e:4e:46:f3:17:e0:c7:65:2d:20:58:4c:86:
                    d8:56:06:3f:cc:73:c7:34:51:79:5c:31:76:c0:ff:
                    bb:41:60:10:97:60:6e:75:1a:2e:51:ef:5f:60:83:
                    5e:59:a7:a0:ba:cd:05:48:3e:ec:28:c9:b2:15:10:
                    1a:8d:a4:0e:f4:f5:00:a8:04:b4:42:bc:e2:95:50:
                    d0:17:ff:7e:ba:af:fa:67:a5:0e:b7:d5:ae:e2:fa:
                    11:96:4a:e3:96:63:30:5c:1d:50:0d:9a:15:6c:f9:
                    43:cc:ae:62:6f:de:2f:f2:a3:8b:3a:3c:52:22:eb:
                    fa:58:f6:a9:91:ae:38:44:88:1c:a9:d4:01:62:d1:
                    78:c8:43:5f:55:ed:86:8c:46:c2:31:4e:47:74:65:
                    1e:e6:e5:76:c1:78:f6:5e:e0:67:12:ca:d3:26:5c:
                    1d:d2:75:3e:33:2b:8f:71:5f:57:50:5d:3c:40:15:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:53:25:F6:09:8F:27:A1:12:83:81:48:A8:1F:D0:D1:F1:69:69:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/125325F6098F27A112838148A81FD0D1F169696F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.36.0/22
                IPv6:
                  2804:1b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61722

    Signature Algorithm: sha256WithRSAEncryption
         72:ef:71:8f:53:f3:eb:b9:e2:c3:ec:45:25:61:79:7c:e0:cf:
         80:36:55:88:09:f9:df:e2:e1:eb:15:70:57:d6:9b:7a:82:c3:
         fb:75:94:94:0c:72:05:66:bc:5c:28:3d:c4:b3:ea:30:a1:a8:
         af:55:b1:61:29:c3:58:22:d9:28:bd:4c:ad:5b:4e:3c:a0:23:
         a2:d2:3e:40:e1:b7:67:1f:b1:c0:5b:88:a2:50:11:3d:de:77:
         a3:af:90:53:12:06:3c:09:b7:9c:82:85:4f:b2:8b:ab:d6:27:
         35:13:ef:38:0d:5c:0e:2f:cc:96:67:91:32:5a:08:e4:cc:01:
         ae:98:88:ed:33:1a:25:0c:4a:0a:00:b2:73:91:89:cc:7b:88:
         4a:21:c8:5a:60:93:c3:14:ba:a8:c2:f5:73:2f:49:ab:e6:d5:
         d9:99:36:40:d4:a4:4f:95:fe:7f:3f:b8:cc:dd:a2:e7:88:93:
         0e:99:79:e8:e8:44:15:bc:6f:ed:01:6b:af:c6:85:58:bf:c2:
         88:4e:15:d0:3d:54:70:6d:d2:0e:c4:f4:e5:75:e3:7a:b4:f1:
         cf:9e:6e:35:83:04:bb:97:d3:86:d1:cc:fb:a6:3d:81:e2:0d:
         4a:5d:dd:7f:03:f2:5f:da:a4:44:4b:b3:66:d3:ec:d2:47:d9:
         93:44:22:33
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbv+E7IX8lBjiL1FBBmGEFg0GTtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjUxMTExMTBaFw0yMzA3MjQxMTE2MTBaMDMxMTAvBgNV
BAMTKDEyNTMyNUY2MDk4RjI3QTExMjgzODE0OEE4MUZEMEQxRjE2OTY5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7VvI590biDNgm0jCLNxTXvBC
4YVXz8cXWnEleDDG/J8IjeFH11VuhV7l/3ZrI+EsRveI2Ahy2hRe9ode85Im2bJQ
HyMzRjfpHzrjDk5G8xfgx2UtIFhMhthWBj/Mc8c0UXlcMXbA/7tBYBCXYG51Gi5R
719gg15Zp6C6zQVIPuwoybIVEBqNpA709QCoBLRCvOKVUNAX/366r/pnpQ631a7i
+hGWSuOWYzBcHVANmhVs+UPMrmJv3i/yo4s6PFIi6/pY9qmRrjhEiByp1AFi0XjI
Q19V7YaMRsIxTkd0ZR7m5XbBePZe4GcSytMmXB3SdT4zK49xX1dQXTxAFdynAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSUyX2CY8noRKD
gUioH9DR8WlpbzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zektNYUZCUHh1NTF2UUZkcUVYR0pyU0ExRjJ1TlU3Tm5n
MXlzS1BrTEhYRC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zektNYUZCUHh1NTF2UUZkcUVYR0pyU0ExRjJ1TlU3Tm5n
MXlzS1BrTEhYRC8wLzEyNTMyNUY2MDk4RjI3QTExMjgzODE0OEE4MUZEMEQxRjE2
OTY5NkYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoNIJDANBAIAAjAHAwUA
KAQbVDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8RowDQYJKoZIhvcNAQELBQAD
ggEBAHLvcY9T8+u54sPsRSVheXzgz4A2VYgJ+d/i4esVcFfWm3qCw/t1lJQMcgVm
vFwoPcSz6jChqK9VsWEpw1gi2Si9TK1bTjygI6LSPkDht2cfscBbiKJQET3ed6Ov
kFMSBjwJt5yChU+yi6vWJzUT7zgNXA4vzJZnkTJaCOTMAa6YiO0zGiUMSgoAsnOR
icx7iEohyFpgk8MUuqjC9XMvSavm1dmZNkDUpE+V/n8/uMzdoueIkw6ZeejoRBW8
b+0Ba6/GhVi/wohOFdA9VHBt0g7E9OV143q08c+ebjWDBLuX04bRzPumPYHiDUpd
3X8D8l/apERLs2bT7NJH2ZNEIjM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org